Prepare the 2.0.1 patch release

[ShadowNineX]

Summary

Prepare the 2.0.1 patch release. Move completed security and malformed-input fixes from Unreleased into the dated release section, add its release link, and document the outstanding Q02-Q10/Q40/Q41 qualification limits. The exact package version comes from the subsequent v2.0.1 tag through MinVer.

Correct release guidance that still described the 2.0 line as unpublished. During the local release rehearsal, the callback-admission test exposed a synchronization race: it waited for registration closure before testing callback closure. It now waits for the existing per-subscription drain signal and verifies the admitted callback completed without a captured exception. Production code is unchanged in this PR.

Scope and ownership

Release notes, release guidance, and one existing callback test. There is no new public API, native ABI, shipping dependency, package layout, runtime policy, or SDK/Client ownership change. The patch includes the already-merged fixes since 2.0.0. The existing 2.0 MinVer floor remains appropriate for this patch tag.

Validation

Check	Evidence	Result
CI / Gate	Hosted PR CI at f149403cb099907165a07d214abd1c4fe6993dd0; all jobs, Sonar and CodeQL passed.	Passed
Local build and tests	SDK 10.0.402; locked audited restore; nonincremental Debug/Release builds with zero warnings/errors; Debug 4,166 passed (Packaging excluded per release procedure), Release 4,237 passed; zero failures/skips; whitespace verification passed.	Passed
Packed package	dotnet pack src/CheatEngine.SDK -c Release -p:MinVerVersionOverride=2.0.1; Release tests consumed that exact local rehearsal package. The release workflow will rebuild and attest its own package on the tag.	Passed locally
Public API files / CompatibilitySuppressions	No public API or intentional break added since 2.0.0. Existing 1.0 compatibility-baseline checks remain enabled.	Not applicable
Qualification level and Q-IDs	C1/C2 checks remain bounded evidence. Explicit waivers describe outstanding Q02-Q10, Q40, and Q41 limits; no qualification promotion.	Not applicable: status unchanged
Live Cheat Engine host	No new exact-host or multi-plugin campaign.	Not executed
Release manifest impact	No payload changes introduced by this PR. Tag workflow stamps 2.0.1, generates SBOM/checksums/provenance, publishes its attested package, and verifies nuget.org contents before finalizing GitHub release.	Planned release

Requirement coverage: Disable_admission_waits_for_an_entered_callback_and_rejects_a_late_one waits for actual callback closure, rejects the late call, drains the entered callback without exception, and checks lifecycle unregister. All 9 LuaHostSubscriptionTests passed in Debug and Release with zero failures/skips.

dotnet test --project tests/CheatEngine.SDK.Lua.Tests/CheatEngine.SDK.Lua.Tests.csproj -c Release --no-restore --filter-class '*LuaHostSubscriptionTests' --fail-skips on --verbosity quiet

Compatibility and release impact

Release 2.0.1 is a patch on the published 2.0.0 contract. No version tag is moved or reused. Publication uses the existing draft-first trusted-publishing workflow and its exact tested artifact. No locally packed nupkg will be published.

Checklist

• Focused changes follow CONTRIBUTING.md.
• The existing callback test now synchronizes on the condition it asserts; no assertion or skip hides the failure.
• Release changes are recorded under the dated 2.0.1 changelog section.
• No public API files, compatibility declarations, or lock files require changes.
• Qualification limitations are stated without promoting C1/C2 evidence to C3/C4.
• Release documentation is updated.
• Final local and hosted validation evidence is complete.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Configuration used: Repository: CheatEngineNet/CheatEngine.SDK/.coderabbit.yaml
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: b6c6e99b-bd18-499c-8ae3-f8396e70082c

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud